Louann Posted October 26, 2021 ID:1485469 Share Posted October 26, 2021 I'm infected. I bought your program but now it won't install. Help! Slso, clicking links brings up Clock Error page. Louann Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 26, 2021 Root Admin ID:1485479 Share Posted October 26, 2021 Hello @Louann and Sorry to hear you're having issues with installing the program. Can you please try to get me some logs so that I can take a closer look for you. To begin, please do the following so that we may take a closer look at your installation for troubleshooting: NOTE: The tools and the information obtained are safe and not harmful to your privacy or your computer, please allow the programs to run if blocked by your system. Download the Malwarebytes Support Tool In your Downloads folder, open the mb-support-x.x.x.xxx.exe file In the User Account Control pop-up window, click Yes to continue the installation Run the MBST Support Tool In the left navigation pane of the Malwarebytes Support Tool, click Advanced In the Advanced Options, click Gather Logs. A status diagram displays the tool is Getting logs from your machine A zip file named mbst-grab-results.zip will be saved to your desktop, please upload that file on your next reply Thank you Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485528 Share Posted October 26, 2021 When I tried to download the file but it said I had to have Microsoft.NETframework4Setup. I downloaded this file but it's stalled trying download and install the program. Now what? Now it tells me when I try to reply to you that my message is worded as Spam. Now what? Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485529 Share Posted October 26, 2021 I removed your file name on my reply and it let me post. Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485531 Share Posted October 26, 2021 My computer is a 2002 Windows XP Inspiron 530. The malware has disabled my Norton Security so there won't be any control of PopUps. I tried again to download and install the NET Framework 4 Setup and it again froze in the same spot. Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485537 Share Posted October 26, 2021 This is the File Log from the failed NET Framework4Setup which I have to have installed before I can run your file. Installation Log Message Types: Errors Verbose Messages Message Details: Date Time © 2009 Microsoft Corporation. All rights reserved. Terms of Use. OS Version = 5.1.2600, Platform 2, Service Pack 3OS Description = WinXP - x86 Professional Service Pack 3 CommandLine = C:\be6575d6e2160efad5f64632fc5be4\\Setup.exe /x86 /x64 /ia64 /webTimeZone = Central Daylight TimeInitial LCID = 1033 Using Simultaneous Download and Install mechanism Operation: Installing Package Name = Microsoft .NET Framework 4 SetupPackage Version = 4.0.30319 User Experience Data Collection Policy: UserControlled Number of applicable items: 7 Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0 WinHttpDetectAutoProxyConfigUrl failed with error: 12180Unable to retrieve Proxy information although WinHttpGetIEProxyConfigForCurrentUser called succeeded Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0 WinHttpDetectAutoProxyConfigUrl failed with error: 12180Unable to retrieve Proxy information although WinHttpGetIEProxyConfigForCurrentUser called succeeded Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0 WinHttpDetectAutoProxyConfigUrl failed with error: 12180Unable to retrieve Proxy information although WinHttpGetIEProxyConfigForCurrentUser called succeeded Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0Error from JobError Callback : hr= 0x80090326 Context=5 Description=The message received was unexpected or badly formatted. . Percentage downloaded = 0 WinHttpDetectAutoProxyConfigUrl failed with error: 12180Unable to retrieve Proxy information although WinHttpGetIEProxyConfigForCurrentUser called succeeded ServiceControl operation succeeded! ServiceControl operation succeeded! Final Result: Installation failed with error code: (0x800C0008) (Elapsed time: 0 00:34:13). Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 26, 2021 Root Admin ID:1485572 Share Posted October 26, 2021 Thank you @Louann Windows XP is a special case. It has not been supported by Microsoft now for many years. Even accessing many secure sites is not possible using Windows XP Let me check and see if I can locate an older version of the program that might still work but nothing new will work on XP. It is highly recommended that you do your best to try and get a newer computer or attempt to install Windows 10 Below is a list of the Windows versions since Windows XP Windows XP (October 2001) Windows Vista (November 2006) Windows 7 (October, 2009) Windows 8 Windows 10 Windows 11 Mainstream support for Windows XP ended on April 14, 2009 Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 26, 2021 Root Admin ID:1485575 Share Posted October 26, 2021 Here is a link to our old Legacy version 3x program. Please download this version and it should install and run for you. https://downloads.malwarebytes.com/file/mb3_legacy Let me know how it goes. You should be able to run this tool as well and we may be able to detect and remove malware using this tool Please download Farbar Recovery Scan Tool and save it to your desktop. Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit Double-click to run it. When the tool opens click Yes to disclaimer. Press the Scan button. It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply. The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well. Thank you Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485578 Share Posted October 26, 2021 This is really frustrating...I now try to download the 3X program and it tries but then says this site takes too long to respond. Malware interference??? Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485580 Share Posted October 26, 2021 Oh, yea, third time charm...it's installed.... Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 26, 2021 Root Admin ID:1485582 Share Posted October 26, 2021 Please scan with that version and post back the log once done. Then download the FRST program and run a scan as shown above and attach those logs and I will review them. Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485583 Share Posted October 26, 2021 Thank you SO much... Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485594 Share Posted October 26, 2021 I ran SCAN and had 65 threats but closed it when it finished quarantining them before I read that you wanted to see the log. How do I get it back to send to you? Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485596 Share Posted October 26, 2021 Also, I paid for mb4 but never could activate it. How do I transfer this over to mb3 which I did activate but doens't show up since the purchase was for mb4? Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 26, 2021 Root Admin ID:1485598 Share Posted October 26, 2021 Go ahead and restart the computer. Then do another scan and see if it finds anything else. Then run the FRST program and post those logs and I'll look at them a bit later today and help you more Link to post Share on other sites More sharing options...
Louann Posted October 26, 2021 Author ID:1485600 Share Posted October 26, 2021 I ran the scan a second time and there were no threats. I went back to the first scan and viewed the results and exported them. I'll try to figure out what to do now. Is this the log? Malwarebytes www.malwarebytes.com -Log Details- Scan Date: 10/26/21 Scan Time: 1:47 PM Log File: 1c50f8c0-368d-11ec-932f-00219b03e0c1.json Administrator: Yes -Software Information- Version: 3.5.1.2522 Components Version: 1.0.365 Update Package Version: 1.0.23248 License: Trial -System Information- OS: Windows XP Service Pack 3 CPU: x86 File System: NTFS User: LOU\Louann -Scan Summary- Scan Type: Threat Scan Scan Initiated By: Manual Result: Completed Objects Scanned: 211457 Threats Detected: 65 Threats Quarantined: 65 Time Elapsed: 50 min, 27 sec -Scan Options- Memory: Enabled Startup: Enabled Filesystem: Enabled Archives: Enabled Rootkits: Disabled Heuristics: Enabled PUP: Detect PUM: Detect -Scan Details- Process: 0 (No malicious items detected) Module: 0 (No malicious items detected) Registry Key: 0 (No malicious items detected) Registry Value: 0 (No malicious items detected) Registry Data: 0 (No malicious items detected) Data Stream: 0 (No malicious items detected) Folder: 17 PUP.Optional.PolarityTech, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\Default\Sync Extension Settings\ipenaminfghhgmgcniaggeeilnnkkdna, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\html\browserAction, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\_locales\en, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\_metadata, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\_locales, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\newtab, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\html, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\css, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\js, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\IPENAMINFGHHGMGCNIAGGEEILNNKKDNA, Quarantined, [494], [491239],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\Default\Local Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\Default\Sync Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\_metadata, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\img, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HHHPAJPNECMHNGFGKCLOKCGHCPFGBAPE, Quarantined, [16997], [542296],1.0.23248 File: 48 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\ipenaminfghhgmgcniaggeeilnnkkdna\000003.log, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\ipenaminfghhgmgcniaggeeilnnkkdna\CURRENT, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\ipenaminfghhgmgcniaggeeilnnkkdna\LOCK, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\ipenaminfghhgmgcniaggeeilnnkkdna\LOG, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\ipenaminfghhgmgcniaggeeilnnkkdna\LOG.old, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\ipenaminfghhgmgcniaggeeilnnkkdna\MANIFEST-000001, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\IPENAMINFGHHGMGCNIAGGEEILNNKKDNA\1.5_0\MANIFEST.JSON, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\css\browserAction.css, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\css\description.css, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\html\browserAction\browserAction.html, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\html\browserAction\description.html, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\js\userNewTab.js, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\newtab\fastesttab.html, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\_locales\en\messages.json, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\_metadata\verified_contents.json, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\after.js, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\background.js, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\chromeRestore.js, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\contentscript.js, Quarantined, [494], [491239],1.0.23248 PUP.Optional.PolarityTech, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ipenaminfghhgmgcniaggeeilnnkkdna\1.5_0\icon.png, Quarantined, [494], [491239],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\000003.log, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\CURRENT, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\LOCK, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\LOG, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Local Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\MANIFEST-000001, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\000003.log, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\CURRENT, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\LOCK, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\LOG, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\LOG.old, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Sync Extension Settings\hhhpajpnecmhngfgkclokcghcpfgbape\MANIFEST-000001, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Replaced, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\DOCUMENTS AND SETTINGS\LOUANN\LOCAL SETTINGS\APPLICATION DATA\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\HHHPAJPNECMHNGFGKCLOKCGHCPFGBAPE\9.4.0.8_0\MANIFEST.JSON, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\img\close.svg, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\img\icon.png, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\img\icon48.png, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\img\info.svg, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\_metadata\verified_contents.json, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\background.html, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\background.js, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\content.js, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\install.js, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\intextContent.js, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\intextstyle.css, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.AdvertisingExt.Generic, C:\Documents and Settings\Louann\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\hhhpajpnecmhngfgkclokcghcpfgbape\9.4.0.8_0\vsframe.js, Quarantined, [16997], [542296],1.0.23248 PUP.Optional.Coupons, C:\WINDOWS\SYSTEM32\CPNPRT2WSWIN32.CID, Quarantined, [10560], [931122],1.0.23248 PUP.Optional.Coupons, C:\WINDOWS\SYSTEM32\CPNPRT2WIN32.CID, Quarantined, [10560], [518254],1.0.23248 Physical Sector: 0 (No malicious items detected) WMI: 0 (No malicious items detected) (end) Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted October 27, 2021 Root Admin ID:1485618 Share Posted October 27, 2021 Your version of Chrome is going to be different, but please try to do the following clean up of Google Chrome as best you can. Again there will be differences due to the age of Chrome on XP Would still like to see the logs from the Farbar FRST program too Link to post Share on other sites More sharing options...
Root Admin AdvancedSetup Posted January 31, 2022 Root Admin ID:1500049 Share Posted January 31, 2022 Glad we could help. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request. This applies only to the originator of this thread. Other members who need assistance please start your own topic in a new thread. Please review the following to help you better protect your computer and privacy Tips to help protect from infection Thank you Link to post Share on other sites More sharing options...
Recommended Posts